Date post: | 31-Dec-2015 |
Category: |
Documents |
Upload: | dortha-patrick |
View: | 218 times |
Download: | 0 times |
1
Day 4-2 Inter-Network Cooperation
4-2.inter-network-cooperation
Cooperation and Coordination
community, sharing,incident response, trust
2
cooperation and coordination
to keep the Internet working
- we are relying on each other
it’s good to know
- community
- point of contact
4-2.inter-network-cooperation
3
NOGsNetwork Operations Group is an open
forum
- technology discussions
- sharing operational best practices
- compare experience
- peering coordination
- establishing personal relationships
4-2.inter-network-cooperation
4
medium for NOGsmailing-list
- anyone can subscribe
- traffic depends on events and topics
in-person meeting
- participation fee varies, and costs of transports, accommodations
- high value
4-2.inter-network-cooperation
5
NANOGNorth American Network Operators’
Group
- evolved from the NSFNET "Regional-Techs" meetings in 1994
- Three meetings each year
NANOG57, Feb 2013, Orland
NANOG58, Jun 2013, New Orleans
NANOG59, Oct 2013, Phoenix4-2.inter-network-cooperation
6
https://www.nanog.org/ - program
1 day tutorial
3 days plenary
- about 500 attendees
from Asia and Europe as well
4-2.inter-network-cooperation
7
AfNOGThe African Network Operators’ Group
- also called ‘Africa Internet Summit’
- established in 2000
- co-located with Af* meetings
- held annually in spring
AfNOG-14/Afrinic-18, Jun 2013, Lusaka, Zambia
4-2.inter-network-cooperation
8
https://www.afnog.org/ - program
5 days workshop
5 days conference and tutorial
2 days AfriNIC meeting
- about 150 attendees
4-2.inter-network-cooperation
9
APRICOTAsia and Pacific Operations Conference
- established in 1996
- co-located with AP* meetings
- held annually on the last week of Feb
APRICOT2013, Singapore
APRICOT2014, Bangkok
APRICOT2015, Fukuoka
4-2.inter-network-cooperation
10
http://www.apricot.net/ - program
5 days workshop
4 days conference and tutorial
1 day APNIC member meeting
- about 600 attendees
4-2.inter-network-cooperation
11
SANOGSouth Asian Network Operators Group
- established in 2003
- Two meeting each year
SANOG21, Jan 2013, Cox’s Bazar
SANOG22, Jul/Aug 2013, Mumbai
4-2.inter-network-cooperation
12
http://www.sanog.org/program
- 5 days workshop
- 1 day tutorial
- 1 day conference
about 250 attendees
4-2.inter-network-cooperation
13
JANOGJapan Network Operators’ Group
- established in 1997
local language community - Japanese
- Two meetings each year
JANOG31, Jan 2013, Tokyo
JANOG32, Jul 2013, TBD
4-2.inter-network-cooperation
14
http://www.janog.gr.jp/ - program
2 days plenary
- about 400 attendees
4-2.inter-network-cooperation
15
BoFsbirds of a feather(BoF) is a small
meeting focused on a specific topic
- security, peering, and so on
usually scheduled in advance, sometimes organized on demand
4-2.inter-network-cooperation
16
coffee breaks andsocial events
to expand relationships
- business and personal
to start/manage a project
- a face-to-face meeting help to step forward things
4-2.inter-network-cooperation
17
NOG operationindependent
- forms a committee to lead the NOG
support from cross industry
- Service Providers
- Research and Academics
- Vendors
- ISOC, NSRC, APNIC, APIA
4-2.inter-network-cooperation
18
other upcoming eventsupcoming network-related education or
training events
- http://ws.edu.isoc.org/calendar/
4-2.inter-network-cooperation
19
CSIRTComputer Security Incident Response
Team(CSIRT) provides the incident handling service for its constituency
- may offer other related services as well
The first CSIRT - CERT/CC was created in 1988 in response to the Morris worm incident4-2.inter-network-cooperation
20
computer security incident
Any real or suspected adverse event
examples:
- attacks to/from your network
- compromised host
- account/information theft
- spam or IT policy violation
4-2.inter-network-cooperation
21
needs for responseto limit the damage
to lower the cost of recovery
an effective response benefits for organizations
- motivation to have a CSIRT in your organization
4-2.inter-network-cooperation
22
The incidenthandling service
- a single point of contact to receive incident reports
- provides response and support to the report
- announcement to disclose information about specific attack/incident
- feedback to the report/request4-2.inter-network-cooperation
23
building your CSIRTmission statement
- what/how to do
constituency
- for whom
structure
- budget, position within organization
relationship with other CSIRTs
4-2.inter-network-cooperation
24
CSIRT typesNational CISRTs
- a national point of contact to coordinate an incident handling, reduce the number of security incidents in that country
ISP/xSP CSIRTs
- provide a secure environment for their customer, and provide response to their customers for security incidents
4-2.inter-network-cooperation
25
CSIRT typesVendors CSIRTs
- improve the security of their products
Enterprise CSIRTs
- improve the security of their corporation’s infrastructure, and provide on-site response for security incidents
4-2.inter-network-cooperation